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32.(CuirKitlx amended) An au|omation system-^!), comprising at least 
abus|(3), 

I/O bus subscribers ^1 — ^ ■ 



connected to the bus-(^. 



' a standard coxitrol device-(45 



40; 



at least one safety analyzer ^ 



4^which is connected to the bus separately by 



means of an approDriate int&. face, m onitors the data flow via the bus system and 



is designed to carry out at leAst 6ne safety-related function. 



loajst onoofs et up for checking and processing 



wherein the safety analyzer ^ 

safet}[-related data in the bu5 datjastream and has having a device for manipulating 

33. (Currently Amended) The a itor niation system (l)-as claimed in claim 32, 
wherwn the standard control device controls at least one safety-related output. 

34. (Currentliy Amended) The a itoi aation system (l^-as claimed in claim 32, 



wherein flie safety analyzer i 



,5'') h as a freely programmable logic device, 



which processes the monitOTjsd s afety-related data. 
35, (Currently Amended) The afttoifiation system {i>-as claimed in claim 32, 
wherein the safety analyzer fe ; 5 j V - 5 '>i s not a logic bus subscribe in die 
autoniation system (i)-and h is ak least one safety-related output {6)-via which at 



least one bus subscriber-(W 



which is associated with the safety analyzer of 



the'aiitomation system can K 5 sv itched on or off 
36. (Currently Amended) The a itor lation system (i)-as claimed in claim 35, 



\ 5")i & set up for switching off at least one of a 



and 



the entire automation system. 



wherpin the safety analyzer 

safetjj island, a bits spur-{S), 
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37. (Currently Amended) The a itomation system as claimed in claim 32, 



wherein the safety analyzer 



whici the safety analyzer is 

j 

automation system for detec 



:oniiected to a safety-related device (i4^in the 



38. (Currently Amended) The aj itomation system (i^-as claimed in claim 32, 

wherein the bus ^^is connd :tec via an interface assCTibly (41)-to a ho$t-(40), 
with the process-related con xol being arranged in the host, and the safety-related 
control being arranged in th( inter&ce assembly. 



39. (Currently Amended) The a 



wherein the safety analyser i ^ 



has at least one safety-related input-(l:G), via 



:mg 



safety-related data. 



itomation system ^l^as claimed in claim 32, 



wherein the safety analyzer i ^ 



wherein the bus (3)-is a serisl bus, and at least one safety analj'zer (S, 5^ i s 

i 

arranged in a long-distance 1 lus section of the automation system. 

I 

40. (Currently Amended) The a{ itomation system (l)-as claimed in claim 38, 

wherein a safety analyzer (5j-is one of arranged directly after the host (4^-or 

arranged after the interface i $$epbly^4t), 
I 

I 

41 . (Currently Amended) The a itoT nation system (i^as claimed in claim 38, 

i 
I 

wherein a safety analyzer (5j -is arranged in the interface assembly444}, 

42. (CuTTtotly Amended) The a)itoiaation system (l^^is claimed in claim 32, 



,5'^ comprises a memory device for storing a 



I 

process map. 

43- (Currently Amended) The ahtoiiiation system (4>-as claimed in claim 32 



\ 5'") h as a device for manipulating at least one 



@005 



of input data and output dats tra ismitted on ihe bus^. 
44. (Currently Amended) The a itoi lation system (i)-as claimed in claim 43, 
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wherein the device overwrites 4 1®^^ input and output data in the 

I 

safetj^ analy2e r - (5, 5\5") , 
45. (Cuirentiy Amended) The a atomation system fi>-as claimed in claim 43, 



r 

i 

• * wherein the device inserts 

46. - (Currently Amended) The 

wherpin at least one safety 

i 

47. (Currently Amended) A 

i 

claim e d in olaim 32» 



using a standard control de\ ice 



the processing of process-lij ikec 



I 
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d^ta into the datastream. 
s^tomation system 0^-as claimed in claim 32 
dbali^zer ( 5, 5\ of redundant design, 
m4ho4 for operating an automation syste m (1) a s 
comprflsmg the following steps: 



[1; 10^ 11) f or carrying out a process control with 



. I/O data and safety-related data, and 
cairying out processing of s|ifetir-related data in at least one safety analyzer (5, 5 \ 
5^\|vith safety-related logid linking data in the bus datastream being processed in 



! 

the sifety analyzer-, 

wherein at least one step selbctdd from a group consisting of overwriting at least 



I 

one data item in the bus datastream, deleting at least one data item in the bus 



datastream and inserting at feast 



atL 



performed bv the at least one sa 



! 

manipulating the datastrean 



on 



the bus. 



as claimed in claim 47» 
ing the standard control device to control at least 



ilsmi 



48. (Previously presented) The ijiethlod 

further comprising the step ^f 
one safety-related output. 

49. (Current] y Amended) The rijietl^od as claimed in claim 47, 
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further comprising tiie step ( f comparing the safety-related logic linking data. 



which is transmitted via the 



3US 



44)-ahd at least one further s ^e^ analyzer (5, 5', 5'') w ith the coiresponding 
• ' logic |lniking data of the fire | sa:^ety analyzer, in a safety analyze r (5, S - V^ - ) * 

i 

50. (Currentily Amended) The c ^ethcd as claimed claim 47, 

i 

further comprising-the step < »f checking the logic linking data, which is produced 

i l-)-a[id is sent as output data via the bus in at least one 



by the standard control (4jA 



safety analyzer {5, 5\ 5'')h ] 



standiard control-{4T4i). 
5 1 . (Currentily Amended) The i^ethod as claimed in claim 49> 



further comprising carrying 



)ut >afety-related fiinctions in response to the 



for at least one of the standard control device (4? 



modeling the safety-related logic links of the 



comj^arison by the safety an|lygb r(5, 5\5'y 

52. (Previously presented) The nlethbd as claimed in claim 50, 

further comprising carrying )ut, safety-related fimctions in response to the 

j I 
checlcing by the safety analy ser. 

i 
! 

53. (Currently Amended) The n|ethpd as claimed in claim 47, 

further comprising the step df cslirying-out a safety-related function via a safety- 

i 

related output-^ of the safe y ajialyze r(5, 5\ 5") 

i 

54. (Currently Amended) The n eth )d as claimed in claim 47, 

i 

• v ! 

further comprisiug the step c| f using the safety analyzer to carry out safety-related 
functions in response to the ij afe y-related data detected via the safety-related 
input (10) of the safety analj zer-^S^. 

55. (Currently Amended) The nj|eth^d as claimed in claim 54, 
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ft 



; of carr dng 




wherein the process 

switching a bus subscriber 

i 

56, (Cancelled) 

57. *(Cuirenily Amended) The 

wherein the safety analyzer 

i 

datastream and copies inpu 
datastream, and vice versa. 



rietjiod as claimed in claim 56, 

5\ 5^0 at least partially stores the monitored 



58. (Currently Amended) The 

wherein safety-related 

59. (Currenay Amended) The 

j 

wherein in addition to a.^ 

I 

leasjt one of a^fee-negated s 

data protection infoimatioi l 

i 

60. (CuixeDltly Amended) 

wherein the bus is a systen i 



data is 



being transmitted between 



onel safety analyzer-^Sr^ 



datastream. 

i 

61, (Cttixently Amended) 

wherein the data is 

62. (Previoi isly presented) The 

wherein the bus is a syster i 



; transm ttec. 



33r 



Qoos 



out the safety-related function comprises 
-3^noro£f. 



data in the bos datastreams to output data in the bus 



metbiod as claimed in claim 47, 

transmitted via the bus fusing a security protocol, 
[netjhod as claimed in claim 58, 

data item, the security protocol comprises at 
afetly data item, a sequential number, an address and 
(CjRC), 

as claimed in claim 47, 
operating on the master-slave principle, with data 
at Ipast two slaves, by means of a data link via at least 
with the safety analyzer copying data in the bus 



The melhod 



bei^g transmitted betweeri at 
I 
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control 



or the master, with th< control or the master copying data in the bus 



@ooo 



datastream. 

63. (Currently Amended) The m|thod as claimed in claim 62, 

• wherein the data is transmittc i'between individual bus subscribers-(3i — 58). 

64. (Cuirently Amended) The m^ fthod as claimed in claim 47, 
wherein at least one-of qualit} daU is produced by means of a safety analyzer-^Sr 

i 

5V^i and the data which h^ is b icn read is prepared for further processmg. 

j 

65. (Cuirentljj Amended) The m ^tho d as claimed in of claim 47, 
wherein the safety-related los ic I nks used in a safety analyzer (S^^e at least 

: form in at least one further safety analyzer-(5^, 
at least partially earned out by the two safety 



partially carried out in redunc ant 



and ttip same safety functions 



analyzers. 



66. (Previous: 



y presented) The m Jthc d as claimed in of claim 47, 



wherein a safety analyzer als<| at 
proces^sing. 



are 



least partially carries out process data 
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